Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/729fbb7e-f674-3ac8-ab60-807b8649f6a1.roa
File:                     729fbb7e-f674-3ac8-ab60-807b8649f6a1.roa (raw, json)
Hash identifier:          lyk8V1yotXdXknfAvwWfiNrtphY13UYbzBA3Mz6FOOA=
Subject key identifier:   F3:14:50:6F:9C:11:B6:2E:0A:50:AE:54:4E:97:FA:53:D7:5C:36:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1D55B1A3E6377E26BCA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/729fbb7e-f674-3ac8-ab60-807b8649f6a1.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     396617
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:d5:5b:1a:3e:63:77:e2:6b:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=e30ca92d-a8e3-491a-a19e-07af5cc5201e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:21:a6:e7:0b:4d:65:94:97:77:80:2c:52:
                    fa:af:5e:a4:fb:b6:a7:66:18:96:53:21:ef:9a:a5:
                    ae:99:81:f5:2e:b3:87:ba:3d:cb:75:98:18:78:0f:
                    bd:ae:ba:ce:a6:c6:f9:e7:62:65:a2:50:c2:22:a9:
                    9e:ce:77:11:94:25:e4:f7:20:d6:d8:11:15:59:bd:
                    29:70:63:7c:2a:4a:36:80:0f:6b:68:98:85:8d:00:
                    ce:4e:f9:28:73:76:4c:ed:f6:33:b8:c5:03:29:11:
                    ac:6e:18:7a:68:95:dd:51:f3:9b:50:0d:2b:0b:ec:
                    22:cb:70:65:2b:20:33:84:c7:5a:9a:a2:0f:28:21:
                    db:43:f0:57:99:a9:6c:2a:f1:e4:2d:fc:4b:19:72:
                    f0:4a:f8:d8:af:3a:a3:9c:e7:8a:cd:3f:2b:5d:1a:
                    a8:fc:b6:54:59:ec:b7:7f:06:42:f8:73:c0:d6:56:
                    d6:21:f6:d3:65:36:70:1f:19:3f:8d:d5:91:cd:fa:
                    9d:32:75:ad:ee:46:61:c7:cf:82:03:e2:df:71:ce:
                    9f:6f:9b:1e:f8:ca:92:fe:93:d5:4d:14:ac:b5:b3:
                    f4:30:e0:43:3e:b7:8c:54:a7:c3:08:44:1b:dd:36:
                    12:12:db:5a:f4:4a:3c:41:6a:db:7c:bb:3f:c4:5f:
                    c9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:14:50:6F:9C:11:B6:2E:0A:50:AE:54:4E:97:FA:53:D7:5C:36:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/729fbb7e-f674-3ac8-ab60-807b8649f6a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:46:ed:84:cd:07:6b:56:d1:fe:8b:66:7a:6f:58:d5:cd:19:
         3b:bb:88:4b:cd:5b:f4:cd:58:a2:4d:3d:60:ec:06:fa:87:a0:
         f3:3d:a6:e8:9e:70:a2:d3:24:56:00:1d:5d:5a:47:a2:24:8d:
         9c:0c:d3:70:ca:8f:51:5a:e7:f2:81:c8:6e:c4:88:7d:5e:9b:
         f6:44:6a:18:d2:88:de:94:eb:63:ab:ef:c5:b4:b6:7a:e7:ad:
         9b:f0:75:15:da:26:b6:b7:b8:19:79:87:b2:68:6a:d1:ae:c1:
         fd:58:85:65:37:eb:ca:bd:50:eb:a8:78:90:76:93:3e:9f:70:
         ac:b5:cb:8b:8d:fe:81:ce:ef:ea:d9:d3:d2:46:0c:c0:3a:df:
         ae:0a:c6:1b:0b:b3:4e:61:f5:bc:59:1d:68:1a:64:60:85:4c:
         1d:eb:c4:1c:ed:49:0e:be:5e:36:c5:92:a9:5b:ce:67:6d:f5:
         36:80:47:4f:a6:43:6e:74:61:dc:45:6f:16:a9:f9:5b:37:06:
         d4:c5:1c:65:e6:23:ab:5d:51:e3:0c:44:64:ea:80:87:9e:78:
         bb:c6:04:e0:bf:0a:ae:e4:2d:a7:b2:b5:01:c3:1e:ad:60:25:
         a3:70:f8:05:98:01:09:ba:e5:8f:2f:ee:23:59:b2:67:62:78:
         17:f8:cd:65
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtZodVbGj5jd+JrygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk
ZTMwY2E5MmQtYThlMy00OTFhLWExOWUtMDdhZjVjYzUyMDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqshpucLTWWUl3eALFL6r16k+7anZhiWUyHv
mqWumYH1LrOHuj3LdZgYeA+9rrrOpsb552JlolDCIqmezncRlCXk9yDW2BEVWb0p
cGN8Kko2gA9raJiFjQDOTvkoc3ZM7fYzuMUDKRGsbhh6aJXdUfObUA0rC+wiy3Bl
KyAzhMdamqIPKCHbQ/BXmalsKvHkLfxLGXLwSvjYrzqjnOeKzT8rXRqo/LZUWey3
fwZC+HPA1lbWIfbTZTZwHxk/jdWRzfqdMnWt7kZhx8+CA+Lfcc6fb5se+MqS/pPV
TRSstbP0MOBDPreMVKfDCEQb3TYSEtta9Eo8QWrbfLs/xF/JxwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPMUUG+cEbYuClCuVE6X+lPXXDbpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzI5ZmJiN2UtZjY3NC0z
YWM4LWFiNjAtODA3Yjg2NDlmNmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC7Ru2EzQdrVtH+i2Z6b1jVzRk7u4hLzVv0zVii
TT1g7Ab6h6DzPabonnCi0yRWAB1dWkeiJI2cDNNwyo9RWufygchuxIh9Xpv2RGoY
0ojelOtjq+/FtLZ6562b8HUV2ia2t7gZeYeyaGrRrsH9WIVlN+vKvVDrqHiQdpM+
n3CstcuLjf6Bzu/q2dPSRgzAOt+uCsYbC7NOYfW8WR1oGmRghUwd68Qc7UkOvl42
xZKpW85nbfU2gEdPpkNudGHcRW8WqflbNwbUxRxl5iOrXVHjDERk6oCHnni7xgTg
vwqu5C2nsrUBwx6tYCWjcPgFmAEJuuWPL+4jWbJnYngX+M1l
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:10 2025 by rpki-client